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Amendments to the Specification: 

Please replace the paragraph that begins on page 13, line 8, with the following paragraph: 

The isolated bus cycle interface 1 52 includes circuitry to interface to the isolated bus 
cycle signals to recognize and service isolated bus cycles, such as the isolated read and write bus 
cycles. The processor nub loader 52, as shown in Figure 1A, includes a processor nub loader 
code and its digest (e.g., cryptographic hash) value. The processor nub loader 52 is invoked by 
execution of an appropriate isolated instruction (e.g., Iso_Init) and is transferred to the isolated 
area 70. From the isolated area 80, the processor nub loader 52 copies the processor nub 18 from 
the system flash memory (e.g., the processor nub code 18 in non- volatile memory 160) into the 
isolated area 70, verifies and logs its integrity, and manages a symmetric key used to protect the 
processor nub's secrets. In one embodiment, the processor nub loader 52 is implemented in read 
only memory (ROM). For security purposes, the processor nub loader 52 is unchanging, tamper- 
resistant and non-substitutable. The digest memory 154, typically implemented in RAM, stores 
the digest (e.g., cryptographic hash) values of the loaded processor nub 18, the operating system 
nub 16, and any other supervisory modules (e.g., ring-0 modules) loaded into the isolated 
execution space. The cryptographic key storage 155 holds a symmetric encryption/decryption 
key that is unique for the platform of the system 100. In one embodiment, the cryptographic key 
storage 155 includes internal fuses that are programmed at manufacturing. Alternatively, the 
cryptographic key storage 155 may also be created during manufacturing with a cryptographic 
random number generator. The isolated execution logical processor manager 156 manages the 
operation of logical processors configuring their isolated execution mode support. In one 
embodiment, the isolated execution logical processor manager 156 includes a logical processor 
count register that tracks the number of logical processors participating in the isolated execution 
mode. The token bus interface 159 interfaces to the token bus .180. A combination of the 
processor nub loader digest, the processor nub digest, the operating system nub digest, and 
optionally additional digests, represents the overall isolated execution digest, referred to as 
isolated digest. The isolated digest is a fingerprint identifying a the all supervisory code 
involved in controlling the isolated execution configuration and operation. The isolated digest is 
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used to attest the state of the current isolated execution and to prove the validity of the software 
loaded into the isolated area,[[.]] 

Please replace the paragraph that begins on page 14, line 14, with the following paragraph: 

The non- volatile memory 1 60 stores non-volatile information. Typically, the non-volatile 
memory 160 is implemented in flash memory. In one embodiment, the non- volatile memory 160 
includes the processor nub 18. The processor nub 1 8 provides set-up and low-level management 
of the isolated area 70 (in the system memory 140), including verification, loading, and logging 
of the operating system nub 16, and the management of the symmetric key used to protect the 
operating system nub's secrets. The processor nub loader 52 performs some part of the setup 
and manages/updates the symmetric key before the processor nub 18 and the OS nub 16 are 
loaded. The proc e ssor nub 1 8 T he processor nub 18 may also provide interface abstractions to 
low-level security services provided by other hardware. The processor nub 1 8 may also be 
distributed by the original equipment manufacturer (OEM) or operating system vendor (OSV). 
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